Your network contains an Active Directory domain named contoso.com. The domain contains 100 user accounts that reside in an organizational unit (OU) named OU1.

You need to ensure that a user named User1 can link and

unlink Group Policy objects (GPOs) to OU1. The solution must minimize the number of permissions assigned to User1.

What should you do?

A. Run the Delegation of Control Wizard on the Policies containers

B. Run the

Set-GPPermission

cmdlet

C. Run the Delega

tion of Control Wizard on OU1

D. Modify the permission on the user1 account

Explanation

Delegation of Control Wizard

The following are common tasks that you can select to delegate control of them:

Create, delete, and manage user accounts

Reset u

ser passwords and force password change at next logon Read all user information

Modify the membership of a group

Join a computer to a domain

Manage Group Policy links

Generate Resultant Set of Policy (Planning)

Generate Resultant Set of Policy (Logging)

Create, delete, and manage inetOrgPerson accounts

Reset inetOrgPerson passwords and force password change at next logon Read all inetOrgPerson information

Incorrect Answers:

A: Not minimum permissions

B: Grants a level of permissions to a security

principal for one GPO or all the GPOs in a domain

D: Will not allow GPO changes to the OU